Solaris 9 Errors with SEAM/Kerberos

[M Glogowski]

hi,

i wanted to know if anyone has encountered the following error with Sun
Kerberos (SEAM) under Solaris 9.  the system i am using is running Solaris 9
with the latest patches from Sun.

everything is configured correctly as far as i know.  however, when i ssh
into the system i get this message twice on the display:

Kerberos authentication failed:  password incorrect

Kerberos authentication failed:  password incorrect

in the KDC log file i get the following error(s):

Mar 10 10:11:36 kdc1 krb5kdc[193](info): AS_REQ x.xx.85.8(88):
NEEDED_PREAUTH: matthewg at XXXXX.COM for krbtgt/XXXXX.COM at XXXXX.COM,
Additional pre-authentication required
Mar 10 10:11:36 kdc1 krb5kdc[193](info): AS_REQ x.xx.85.8(88): ISSUE:
authtime 1047309096, matthewg at XXXXX.COM for krbtgt/XXXXX.COM at XXXXX.COM
Mar 10 10:11:36 kdc1 krb5kdc[193](info): TGS_REQ x.xx.85.8(88): ISSUE:
authtime 1047309096, matthewg at XXXXX.COM for host/kdc2.XXXXX.com at XXXXX.COM
krb5kdc: Unknown code 2 - snk4 finding the enctype and key
<matthewg/SNK4 at XXXXX.COM>
Mar 10 10:11:36 kdc1 krb5kdc[193](info): AS_REQ x.xx.85.8(88):
NEEDED_PREAUTH: matthewg at XXXXX.COM for changepw/kdc1.XXXXX.com at XXXXX.COM,
Additional pre-authentication required
Mar 10 10:11:36 kdc1 krb5kdc[193](info): AS_REQ x.xx.85.8(88): ISSUE:
authtime 1047309096, matthewg at XXXXX.COM for
changepw/kdc1.XXXXX.com at XXXXX.COM


the authentication does succeed, am able to login and klist shows a valid
ticket.

logging in from the console does not produce the above errors.  is this
possibly an error in the ssh setup.  i haven't changed any of the default
parameters.

i did find a similar error that someone has posted about in the past, and
she re-generated the krb5.keytab file on the server.  i have done this also,
but am still getting the errors above.

thanks in advance,

-matt

(please reply to the post only)